v4.6.1

What's Changed

• feat: process the processor_overrides diagnostics by @RomainMuller in #154

Full Changelog: v4.6.0...v4.6.1

v4.6.0

What's Changed

• feat: upgrade libddwaf v1.28.1 -> v1.29.0 by @eliottness in #152

cc @M4TTRX

Full Changelog: v4.5.0...v4.6.0

v4.5.0

What's Changed

• chore: update default ruleset to 1.15.1 by @dd-k9-library-go[bot] in #148
• feat: upgrade libddwaf v1.25.1 -> v1.28.1 by @eliottness in #151
• [SINT-3848] 🔒 Pin GitHub Actions to specific SHA versions for enhanced security by @juliendoutre in #150

New Contributors

• @juliendoutre made their first contribution in #150

Full Changelog: v4.4.0...v4.5.0

v4.4.0

What's Changed

• feat(ruleset): don't embed the ruleset if the build tag datadog.no_waf is set by @eliottness in #142
• chore: use RTLD_LOCAL instead of RTLD_GLOBAL for Dlopen by @RomainMuller in #144
• fix(darwin): close .dylib file before returning from DumpEmbeddedWAF by @RomainMuller in #147
• fix: data race between libddwaf.Load() and libddwaf.Usable() by @RomainMuller in #149

Full Changelog: v4.3.2...v4.4.0

v4.3.2

This fixes an issue that can cause kernel panics or spontaneous reboots on macOS hosts with Apple M4 CPUs running multiple concurrent processes using this package at the same time.

Full Changelog: v4.3.1...v4.3.2

v4.3.1

What's Changed

• chore: don't bake-in the default ruleset on Windows by @RomainMuller in #139
• chore: fix ruleset updater workflow not working by @RomainMuller in #140
• chore: update default ruleset to 1.15.0 by @dd-k9-library-go[bot] in #141

New Contributors

• @dd-k9-library-go[bot] made their first contribution in #141

Full Changelog: v4.3.0...v4.3.1

v4.3.0

What's Changed

• chore: support go1.25 by @RomainMuller in #135
• fix: diagnostics decoder improperly sets RulesData with ExclusionData diags by @RomainMuller in #134
• feat(log): support for WAF logging on linux && !cgo by @eliottness in #136
• fix: '-' serialization tag handling by @RomainMuller in #137

Full Changelog: v4.2.0...v4.3.0

v4.2.0

What's Changed

• chore: remove unsafe.KeepAlive (use runtime.KeepAlive instead) by @RomainMuller in #127
• chore: upgrade to libddwaf 1.25.1 by @RomainMuller in #128
• feat(encoder): honor encoding tags when encoding structs by @RomainMuller in #130
• feat: embed the default ruleset in go-libddwaf by @RomainMuller in #129
• chore: fix ruleset updater automation by @RomainMuller in #132
• feat: expose Builder API to manage default recommended ruleset by @RomainMuller in #131

Full Changelog: v4.1.1...v4.2.0

v4.1.1

What's Changed

• refactor: change visibility to public of the decodeObject method by @e-n-0 in #125

New Contributors

• @e-n-0 made their first contribution in #125

Full Changelog: v4.1.0...v4.1.1

v4.1.0

What's Changed

• feat: Encodable by @eliottness in #123

Full Changelog: v4.0.0...v4.1.0